Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/718E1E28CBE811EF8B73FCBB762E951A.roa
File: 718E1E28CBE811EF8B73FCBB762E951A.roa (raw, json)
Hash identifier: CZwCailG1npTC+KF80NfPnpOrSns1ZIi4T0HVjhhZRI=
Subject key identifier: A4:91:DB:7C:8D:2A:60:48:79:83:FD:8D:75:C3:72:1F:88:04:F2:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013597
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/718E1E28CBE811EF8B73FCBB762E951A.roa
Signing time: Mon 06 Jan 2025 04:41:07 +0000
ROA not before: Mon 06 Jan 2025 04:41:03 +0000
ROA not after: Wed 07 Jan 2026 04:41:03 +0000
asID: 18233
IP address blocks: 154.197.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79255 (0x13597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 6 04:41:03 2025 GMT
Not After : Jan 7 04:41:03 2026 GMT
Subject: CN=677b5ee3-2019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:50:c2:18:8d:38:9b:82:83:dc:6e:6b:23:30:
3f:40:00:26:5d:30:67:bd:38:38:bc:79:86:45:9e:
b4:c0:ad:7e:ef:f1:a3:71:17:77:c9:a2:01:be:02:
16:3a:f3:92:95:5b:6a:50:43:72:0d:46:21:dc:5e:
98:98:6f:bd:06:9b:11:ab:f7:3d:9e:a0:c4:b2:ae:
db:56:24:94:a3:69:e3:f4:28:6c:7b:e9:e1:68:6f:
24:f7:bb:09:3c:ae:7f:c1:70:bf:58:32:9e:fa:ca:
82:f8:a7:de:04:85:ad:c6:d9:9e:8b:54:1a:64:20:
f2:75:d2:4b:7c:2c:66:d5:cd:8d:d6:3b:5c:9a:09:
a6:65:1c:f9:f9:d5:09:d8:6f:bc:97:c9:83:3f:77:
1a:1b:7f:a8:3b:ba:e2:00:54:e4:49:b2:a9:2a:b1:
f0:7f:f1:76:3a:98:56:60:b7:da:d8:9d:66:d9:8c:
ae:38:06:a7:fb:9d:a5:2d:d9:e9:b0:82:95:01:5e:
96:fe:29:3f:37:1e:27:07:ea:2a:81:2f:cb:d3:70:
48:fa:2f:b8:31:ec:1f:00:98:72:1e:8f:53:6a:f7:
35:89:4f:54:09:be:78:ae:6a:e2:2a:0e:c8:0b:32:
ca:67:df:f3:4b:29:5b:bf:3e:a7:3a:ee:e8:de:14:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:91:DB:7C:8D:2A:60:48:79:83:FD:8D:75:C3:72:1F:88:04:F2:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/718E1E28CBE811EF8B73FCBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.59.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:96:53:a8:4a:ce:62:7d:35:89:ad:d7:4d:68:0d:da:e4:55:
56:18:5c:ab:bd:cb:e5:3d:29:ea:75:b1:fc:a1:d9:fe:63:ba:
7b:aa:4c:e0:63:48:54:db:b7:a9:84:36:cd:ba:d3:5a:6e:1e:
42:e1:1a:e9:dc:46:5a:8e:d6:60:c6:7a:11:cb:d9:69:e5:39:
7f:7d:b7:96:7b:d3:d3:14:db:8c:c6:32:d7:49:b6:07:0d:3d:
04:d5:2e:97:3b:26:a6:54:63:06:81:5c:fe:91:f4:b9:24:85:
8d:61:6d:f0:d6:37:b4:5b:24:1d:04:46:0c:f7:83:3a:2d:21:
a5:ca:87:50:fd:5f:38:a8:c9:63:01:2e:5a:9d:aa:8a:89:7f:
bc:f7:bc:d6:f7:3a:ac:8f:f9:ab:cb:0a:7b:b1:08:f3:99:6e:
e8:34:5a:20:88:f2:59:81:7c:c6:ff:9c:e5:66:b4:51:9b:49:
22:f8:a9:aa:73:13:02:0f:39:8c:53:79:a4:1b:dd:2c:9f:f2:
88:fc:89:52:46:90:c1:01:5f:59:28:8b:a0:8f:46:e3:44:fd:
b7:31:a2:7c:38:4c:72:cb:1f:88:8c:4e:2d:84:c5:70:3b:d1:
7c:28:3f:8a:5f:b5:5f:82:09:13:dc:3c:26:99:c4:4d:c1:50:
9c:8b:35:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATWXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA2MDQ0MTAzWhcNMjYwMTA3MDQ0MTAzWjAYMRYw
FAYDVQQDEw02NzdiNWVlMy0yMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7lDCGI04m4KD3G5rIzA/QAAmXTBnvTg4vHmGRZ60wK1+7/GjcRd3yaIB
vgIWOvOSlVtqUENyDUYh3F6YmG+9BpsRq/c9nqDEsq7bViSUo2nj9Chse+nhaG8k
97sJPK5/wXC/WDKe+sqC+KfeBIWtxtmei1QaZCDyddJLfCxm1c2N1jtcmgmmZRz5
+dUJ2G+8l8mDP3caG3+oO7riAFTkSbKpKrHwf/F2OphWYLfa2J1m2YyuOAan+52l
LdnpsIKVAV6W/ik/Nx4nB+oqgS/L03BI+i+4MewfAJhyHo9Tavc1iU9UCb54rmri
Kg7ICzLKZ9/zSylbvz6nOu7o3hSNawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKSR
23yNKmBIeYP9jXXDch+IBPJpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MThFMUUyOENCRTgxMUVGOEI3M0ZDQkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsU7MA0GCSqGSIb3DQEB
CwUAA4IBAQBrllOoSs5ifTWJrddNaA3a5FVWGFyrvcvlPSnqdbH8odn+Y7p7qkzg
Y0hU27ephDbNutNabh5C4Rrp3EZajtZgxnoRy9lp5Tl/fbeWe9PTFNuMxjLXSbYH
DT0E1S6XOyamVGMGgVz+kfS5JIWNYW3w1je0WyQdBEYM94M6LSGlyodQ/V84qMlj
AS5anaqKiX+897zW9zqsj/mrywp7sQjzmW7oNFogiPJZgXzG/5zlZrRRm0ki+Kmq
cxMCDzmMU3mkG90sn/KI/IlSRpDBAV9ZKIugj0bjRP23MaJ8OExyyx+IjE4thMVw
O9F8KD+KX7VfggkT3DwmmcRNwVCcizWo
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:38 2025 by rpki-client